AWS Cloud Prac. S.G Flashcards
What is AWS Database Migration Service (DMS)?
AWS Database Migration Service (DMS) helps you migrate databases to AWS easily and securely.
What is AWS OpsWorks?
AWS OpsWorks is a configuration management service that provides managed instances of Chef and Puppet.
Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers.
What is AWS Application Migration Service?
AWS Application Migration Service is a highly automated lift-and-shift (rehost) solution that simplifies the process of migrating applications from physical, virtual, and cloud-based infrastructure, ensuring that they are fully operational in any AWS Region without compatibility issues.
What is AWS Application Discovery Service?
AWS Application Discovery Service helps enterprise customers plan migration projects by gathering information about their on-premises data centers.
What is AWS Support Concierge?
Included as part of the Enterprise Support plan, the Support Concierge Team are AWS billing and account experts that specialize in working with enterprise accounts. The Concierge team will quickly and efficiently assist you with your billing and account inquiries, and work with you to help implement billing and account best practices so that you can focus on running your business.
Short Ans: AWS Support Concierge Service assists customers with account and billing inquiries.
What is AWS Customer Service?
AWS Customer Service can help AWS customers with their billing and account inquiries, and it is included in all AWS support plans (Basic, Developer, Business, and Enterprise).
However, due to the fact that AWS Customer Service is not dedicated to specific types of inquiries, it is not as quick or as efficient as the AWS Support Concierge. AWS Support Concierge is available only for AWS Enterprise support subscribers and is dedicated only to help AWS customers with their billing and account inquiries.
What is AWS Operations Support?
AWS Operations Support is an Enterprise support program that provides operations assessments and analysis to identify gaps across the operations lifecycle, as well as recommendations based on best practices.
What is AWS Operations Support?
AWS Operations Support is an Enterprise support program that provides operations assessments and analysis to identify gaps across the operations lifecycle, as well as recommendations based on best practices.
What is AWS Health Dashboard?
The AWS Health Dashboard (previously AWS Personal Health Dashboard) is the single place to learn about the availability and operations of AWS services.
You can view the overall status of all AWS services, and you can sign in to access a personalized view of the health of the specific services that are powering your workloads and applications. AWS Health Dashboard proactively notifies you when AWS experiences any events that may affect you, helping provide quick visibility and guidance to minimize the impact of events in progress, and plan for any scheduled changes, such as AWS hardware maintenance.
What is AWS Infrastructure Event Managment?
AWS Infrastructure Event Management is a short-term engagement with AWS Support, included in the Enterprise-level Support product offering, and available for additional purchase for Business-level Support subscribers.
AWS Infrastructure Event Management partners with your technical and project resources to gain a deep understanding of your use case and provide architectural and scaling guidance for an event.
Common use-case examples for AWS Event Management include advertising launches, new product launches, and infrastructure migrations to AWS.
What is Amazon EFS?
Amazon EFS is a file-level storage technology that provides massively parallel shared access to thousands of Amazon EC2 instances, enabling your applications to achieve high levels of aggregate throughput and IOPS with consistently low latencies.
What is Amazon S3?
Amazon S3 is an object level storage built to store and retrieve any amount of data from anywhere – web sites and mobile apps, corporate applications, and data from IoT sensors or devices.
It is designed to deliver 99.999999999% durability, and stores data for millions of applications used by market leaders in every industry.
What is Amazon EBS?
Amazon EBS is a block-level storage that provides storage volumes for use with Amazon EC2 and Amazon RDS instances.
What is Amazon Instance Store?
An instance store provides temporary block-level storage for your EC2 instances. Instance store is ideal for temporary storage of information that changes frequently, such as buffers, caches, scratch data, and other temporary content.
What is AWS Trusted Advisor?
AWS Trusted Advisor is an online tool that provides you real time guidance to help you provision your resources following AWS best practices.
AWS Trusted Advisor offers a rich set of best practice checks and recommendations across five categories: cost optimization; security; fault tolerance; performance; and service limits (also referred to as service quotas).
AWS Trusted Advisor improves the security of your application by closing gaps, enabling various AWS security features, and examining your permissions.
What does AWS Trusted Advisor core security checks include?
1- Security Groups - Specific Ports Unrestricted.
2- Amazon S3 Bucket Permissions.
3- MFA on Root Account.
What is the AWS Trusted Advisor core security check “Security Groups” do?
Security Groups - Specific Ports Unrestricted:
Checks security groups for rules that allow unrestricted access to specific ports. Unrestricted access increases opportunities for malicious activity (hacking, denial-of-service attacks, loss of data).
What is the AWS Trusted Advisor core security check “Amazon S3 Bucket Permissions” do?
Amazon S3 Bucket Permissions:
- Checks buckets in Amazon Simple Storage Service (Amazon S3) that have open access permissions.
- Bucket permissions that grant List access to everyone can result in higher than expected charges if objects in the bucket are listed by unintended users at a high frequency.
- Bucket permissions that grant Upload/Delete access to everyone create potential security vulnerabilities by allowing anyone to add, modify, or remove items in a bucket. This check examines explicit bucket permissions and associated bucket policies that might override the bucket permissions.
What is the AWS Trusted Advisor core security check “MFA on Root Account” do?
MFA on Root Account:
Checks the root account and warns if multi-factor authentication (MFA) is not enabled.
For increased security, AWS recommends that you protect your account by using MFA, which requires a user to enter a unique authentication code from their MFA hardware or virtual device when interacting with the AWS console and associated websites.
What is AWS Shield?
AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.
AWS Shield does not provide security recommendations.
What is AWS Management Console?
The AWS Management Console is used to access and manage Amazon Web Services through a simple and intuitive web-based user interface.
The console itself doesn’t provide any recommendations
What is AWS Secrets Manager?
AWS Secrets Manager is a secrets management service that enables you to store, retrieve, rotate, audit, and monitor secrets centrally.
AWS Secrets Manager allows you to manage secrets such as database credentials, on-premises resource credentials, SaaS application credentials, third-party API keys, and Secure Shell (SSH) keys.
AWS Secrets Manager does not provide security
What is Disk disposal?
Disk disposal ( Storage Device Decommissioning): When a storage device has reached the end of its useful life, AWS procedures include a decommissioning process that is designed to prevent customer data from being exposed to unauthorized individuals.
All decommissioned magnetic storage devices are degaussed and physically destroyed in accordance with industry-standard practices.
What must an IAM user provide to interact with AWS services using the AWS Command Line Interface (AWS CLI)
Access Keys
Access keys consist of an access key ID and secret access key, which are used to sign programmatic requests to AWS using the CLI or the SDK.
Hundreds of thousands of DDoS attacks are recorded every month worldwide. What service does AWS provide to help protect AWS Customers from these attacks?
AWS Shield, AWS WAF
What do Amazon Route 53, Amazon CloudFront, Elastic Load Balancing, and AWS WAF have in common?
They control and absorb traffic and deflect unwanted requests.
What is Amazon Cognito?
Amazon Cognito allows you to add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily.
What is AWS KWS?
AWS KMS provides a highly available key storage, management, and auditing solution for you to encrypt data within your own applications and control the encryption of stored data across AWS services.
What is AWS Config?
AWS Config is a service that enables you to monitor, assess, and audit all changes made to your AWS resources.
AWS Config is a fully managed service that provides you with an AWS resource inventory, configuration history, and configuration change notifications to enable security and governance.
With AWS Config you can discover existing AWS resources, export a complete inventory of your AWS resources with all configuration details, and determine how a resource was configured at any point in time. These capabilities enable compliance auditing, security analysis, and resource change tracking.
One of the most important AWS best-practices to follow is the cloud architecture principle of elasticity. How does this principle improve your architecture’s design?
By automatically provisioning the required AWS resources based on changes in demand
What is Amazon Relational Database?
Amazon Relational Database Service (Amazon RDS) makes it easy to set up, operate, and scale a relational database in the cloud.
It provides cost-efficient, resizable capacity while automating time-consuming administration tasks such as hardware provisioning, operating system maintenance, database setup, patching and backups.
It frees you to focus on your applications so you can give them the fast performance, high availability, security and compatibility they need.
Amazon RDS can be used to host Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle, and Microsoft SQL Server databases.
What is Amazon Redshift
Amazon Redshift is not a MySQL database service. Amazon Redshift is a fully managed data warehouse service that makes it simple and cost-effective to analyze all your data using standard SQL and your existing Business Intelligence (BI) tools.
What is Amazon DynamoDB?
DynamoDB is serverless with no servers to provision, patch, or manage and no software to install, maintain, or operate. DynamoDB automatically scales tables up and down to adjust for capacity and maintain performance. Availability and fault tolerance are built in, eliminating the need to architect your applications for these capabilities.
Amazon DynamoDB is not a MySQL database service. Amazon DynamoDB is a fully managed NoSQL database service.
What is Amazon CloudWatch
Amazon CloudWatch is not a database service.
Amazon CloudWatch is a monitoring service that gives you complete visibility of your cloud resources and applications
You can use Amazon CloudWatch to collect and track metrics, collect and monitor log files, set alarms, and automatically react to changes in your AWS resources.
Which of the following services allows customers to manage their agreements with AWS?
AWS Artifact
What is AWS Artifact?
AWS Artifact is a self-service audit artifact retrieval portal that provides customers with on-demand access to AWS’ compliance documentation and AWS agreements.
You can use AWS Artifact Agreements to review, accept, and track the status of AWS agreements such as the Business Associate Addendum (BAA).
What is AWS Organizations?
AWS Organizations helps customers centrally govern their environments as they grow and scale their workloads on AWS.
Whether customers are a growing startup or a large enterprise, Organizations helps them to centrally manage billing; control access, compliance, and security; and share resources across their AWS accounts.
What is AWS Systems Manager?
AWS Systems Manager gives you visibility and control of your infrastructure on AWS.
Systems Manager provides a unified user interface so you can view operational data from multiple AWS services and allows you to automate operational tasks across your AWS resources.
What is AWS Certificate Manager?
AWS Certificate Manager is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources
In order to implement best practices when dealing with a “Single Point of Failure,” you should attempt to build as much automation as possible in both detecting and reacting to failure. Which of the following AWS services would help?
Auto Scaling, ELB
What is Amazon CloudFront?
Amazon CloudFront is a global content delivery network (CDN) service that gives businesses and web application developers an easy and cost effective way to distribute content (such as videos, data, applications, and APIs) with low latency and high data transfer speeds.
What is AWS Direct Connect?
AWS Direct Connect allows you to establish a dedicated network connection from your premises to AWS.
What is AWS Regions?
An AWS Region is a physical location in the world where AWS have multiple Availability Zones.
Availability Zones consist of one or more discrete data centers, each with redundant power, networking, and connectivity, housed in separate facilities.
What is Amazon VPN?
AWS VPN is comprised of two services: AWS Site-to-Site VPN and AWS Client VPN.
AWS Site-to-Site VPN enables you to securely connect your on-premises network or branch office site to AWS.
AWS Client VPN enables you to securely connect users (from any location) to AWS or on-premises networks.
Which of the following does NOT belong to the AWS Cloud Computing models?
- Software as a Service (SaaS)
- Platform as a Service (PaaS)
- Networking as a Service (NaaS)
What is Infrastructure as a Service (IaaS)?
Infrastructure as a Service (IaaS) contains the basic building blocks for cloud IT and typically provide access to networking features, computers (virtual or on dedicated hardware), and data storage space. IaaS provides you with the highest level of flexibility and management control over your IT resources and is most similar to existing IT resources that many IT departments and developers are familiar with today.
